Splunk Dev

Alert Setup

sayashagarwal27
New Member

Alert should trigger each time if count of event is less 10 in last 30 min. But it will aggregate alerts if count is more than 10 in last 30 min

0 Karma

richgalloway
SplunkTrust
SplunkTrust

So if two events occur every 30 minutes then you want two alerts triggered and if 11 events occur then you want a single alert, correct?  If so then Splunk does not throttle alerts that way.  Go to https://ideas.splunk.com to suggest Splunk offer it.

If that is not what you seek then please describe the problem more.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

CX Day is Coming!

Customer Experience (CX) Day is on October 7th!! We're so excited to bring back another day full of wonderful ...

Strengthen Your Future: A Look Back at Splunk 10 Innovations and .conf25 Highlights!

The Big One: Splunk 10 is Here!  The moment many of you have been waiting for has arrived! We are thrilled to ...

Now Offering the AI Assistant Usage Dashboard in Cloud Monitoring Console

Today, we’re excited to announce the release of a brand new AI assistant usage dashboard in Cloud Monitoring ...